🇺🇸
TPI-Abuse
2026-11-06 16:12:45
UTC ·
(4 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.168.59.58 (58.59.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:12:38.598102 2026] [security2:error] [pid 7629:tid 762 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.168.59.58 (58.59.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:12:38.598102 2026] [security2:error] [pid 7629:tid 7629] [client 34.168.59.58:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.bvnboysbasketball.com"] [uri "/images../.env"] [unique_id "au38dsycdYuM-8BRMIB5eQAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
rubixstudios
2026-11-06 14:35:03
UTC ·
(1 hour ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 13:18:33
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.168.59.58 (58.59.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 08:18:28.895466 2026] [security2:error] [pid 12209:tid 12 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.168.59.58 (58.59.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 08:18:28.895466 2026] [security2:error] [pid 12209:tid 12209] [client 34.168.59.58:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cloudex.link"] [uri "/images../.env"] [unique_id "au3TpJm1I-3t_xnpjX88rQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 12:45:19
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.168.59.58 (58.59.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 07:45:15.802472 2026] [security2:error] [pid 2194:tid 219 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.168.59.58 (58.59.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 07:45:15.802472 2026] [security2:error] [pid 2194:tid 2194] [client 34.168.59.58:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ccamp.dev"] [uri "/laravel/.env"] [unique_id "au3L2yNNNKM_EXPaPwM5qQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
NotCool
2026-11-06 10:43:07
UTC ·
(5 hours ago)
(CRAWLDELAY) Generic Bot Crawl-delay Violation 34.168.59.58 (58.59.168.34.bc.googleusercontent.com): 50 in the last 3600 secs
Bad Web Bot
2026-11-06 10:22:06
UTC ·
(5 hours ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇩🇪
maxpower
2026-11-06 10:19:44
UTC ·
(5 hours ago)
(PERMBLOCK) 34.168.59.58 (US/United States/58.59.168.34.bc.googleusercontent.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
Port Scan
🇺🇸
TPI-Abuse
2026-11-06 09:45:16
UTC ·
(6 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.168.59.58 (58.59.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:45:09.781038 2026] [security2:error] [pid 21636:tid 21 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.168.59.58 (58.59.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:45:09.781038 2026] [security2:error] [pid 21636:tid 21636] [client 34.168.59.58:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.bradleybarefoot.com|F|2"] [data ".bradleybarefoot.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.bradleybarefoot.com"] [uri "/z9x8c7v6b5-debug-trigger-www.bradleybarefoot.com"] [unique_id "au2hpaBn8loNp7PXVlsLVQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-11-06 09:42:17
UTC ·
(6 hours ago)
[FriNov0610:42:14.9166572026][security2:error][pid2224390:tid2224457][client34.168.59.58:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\|__schema\\\\\\\\\?{\?\(\?:querytype\|types\?\)\)\?\\\\\\\\{\"atREQU ...
show more
[FriNov0610:42:14.9166572026][security2:error][pid2224390:tid2224457][client34.168.59.58:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\|__schema\\\\\\\\\?{\?\(\?:querytype\|types\?\)\)\?\\\\\\\\{\"atREQUEST_BODY.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"234\"][id\"344378\"][rev\"2\"][msg\"Atomicorp.comWAFRules:GraphQLInjectionAttackattempt\"][data\"MatchedData:__schema{types{foundwithinREQUEST_BODY:{\\\\x22query\\\\x22:\\\\x22{__schema{types{namefields{nameargs{namedefaultvalue}}}}}\\\\x22}\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"www.avvnicolaurbani.ch\"][uri\"/graphql\"][unique_id\"au2g9k04Pz_KfMy-7M7qaAAAAIg\"]\,referer:https://www.avvnicolaurbani.ch
show less
Hacking
Web App Attack
🇬🇧
poundawebsiteltd
2026-11-06 09:18:58
UTC ·
(6 hours ago)
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.168.59.58 ([REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 34.168.59.58 (58.59.168.34.bc.googleusercontent.com): 20 ...
show more
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.168.59.58 ([REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 34.168.59.58 (58.59.168.34.bc.googleusercontent.com): 20 in the last 3600 secs
show less
Brute-Force
Web App Attack
🇨🇭
SOC [GOLINE SA]
2026-11-06 09:08:26
UTC ·
(7 hours ago)
[RoutePulse | 2026-11-06T09:08:25Z | RTBH-INJECTED]
ATTACK CLASS: behavioral
SOURCE: 34.168.59.58 (58.59.168.34.bc.googleusercontent.com) · AS396982 Google LLC · United States
EVIDENCE: Auto-classified: threat score 28 is below AI analysis threshold ...
show more
[RoutePulse | 2026-11-06T09:08:25Z | RTBH-INJECTED]
ATTACK CLASS: behavioral
SOURCE: 34.168.59.58 (58.59.168.34.bc.googleusercontent.com) · AS396982 Google LLC · United States
EVIDENCE: Auto-classified: threat score 28 is below AI analysis threshold (70). Monitoring under observation.
INTEL: AbuseIPDB 98% | RoutePulse score 62/100
CONVICTION: Tier 1, LLR -0.10 (multi-source SPRT)
MITRE: T1071 Application Layer Protocol
DETECTION: Conviction Engine SPRT + 14-detector ML stack (6-model weighted ensemble) + 5-pillar threat scoring
ACTION: BGP null route injected at RoutePulse network edge
show less
Hacking
🇷🇴
clauss
2026-11-06 09:02:29
UTC ·
(7 hours ago)
34.168.59.58 - - [06/Nov/2026:11:02:28 +0200] "GET /rclone.conf HTTP/2.0" 403 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.168.59.58 - - [06/Nov/2026:11:02:28 +0200] "GET /api/ ...
show more
34.168.59.58 - - [06/Nov/2026:11:02:28 +0200] "GET /rclone.conf HTTP/2.0" 403 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.168.59.58 - - [06/Nov/2026:11:02:28 +0200] "GET /api/.env/public/.env HTTP/2.0" 403 146 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
...
show less
Web App Attack
🇮🇹
VHosting
2026-11-06 08:50:05
UTC ·
(7 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-11-06 08:41:38
UTC ·
(7 hours ago)
excessive HTTP 404 errors
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-06 08:40:23
UTC ·
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.168.59.58 (58.59.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:40:17.044323 2026] [security2:error] [pid 24206:tid 24 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.168.59.58 (58.59.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:40:17.044323 2026] [security2:error] [pid 24206:tid 24206] [client 34.168.59.58:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.cloudex.click"] [uri "/.htpasswd"] [unique_id "au2ScX8CbYVLfeGyYxMdGwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
